From 061ed396a5e90e2d8df2a1a66f5a05ad58b31b7b Mon Sep 17 00:00:00 2001
From: Daniel G Wilson <daniel@danielgwilson.com>
Date: Thu, 2 Jul 2026 22:15:24 -0700
Subject: [PATCH] Add Codex skill metadata

---
 package.json                          |  4 +-
 scripts/secret-sweep.sh               | 64 +++++++++++++++++++++++++++
 skills/fathom/agents/openai.yaml      |  4 +-
 skills/fathom/assets/fathom-small.svg |  3 ++
 skills/fathom/assets/fathom.svg       |  9 ++++
 5 files changed, 82 insertions(+), 2 deletions(-)
 create mode 100755 scripts/secret-sweep.sh
 create mode 100644 skills/fathom/assets/fathom-small.svg
 create mode 100644 skills/fathom/assets/fathom.svg

diff --git a/package.json b/package.json
index a656bfa..f358380 100644
--- a/package.json
+++ b/package.json
@@ -40,10 +40,12 @@
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "lint": "npm run typecheck",
     "lint:public-surface": "node scripts/public-surface-check.mjs",
+    "secret-sweep": "bash scripts/secret-sweep.sh",
+    "check:release": "npm run typecheck && npm test && npm run lint:public-surface && npm run secret-sweep",
     "pretest": "npm run build",
     "test": "tsx --test",
     "start": "node dist/cli.js",
-    "prepublishOnly": "npm run lint && npm run lint:public-surface && npm test",
+    "prepublishOnly": "npm run check:release",
     "prepare": "npm run build"
   },
   "dependencies": {
diff --git a/scripts/secret-sweep.sh b/scripts/secret-sweep.sh
new file mode 100755
index 0000000..d993f87
--- /dev/null
+++ b/scripts/secret-sweep.sh
@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)"
+
+capture_hits="$(
+  find "$root" \
+    -type f \
+    \( \
+      -name '*.har' -o \
+      -name '*.har.gz' -o \
+      -name '*.trace' -o \
+      -name '*.trace.json' -o \
+      -name 'storage-state.json' -o \
+      -name 'cookies.txt' -o \
+      -name 'cookies.json' -o \
+      -name '*.session.json' \
+    \) \
+    -not -path '*/.git/*' \
+    -not -path '*/node_modules/*' \
+    -not -path '*/dist/*' \
+    -not -path '*/coverage/*' \
+    -not -path '*/.next/*' \
+    -not -path '*/.firecrawl/*' \
+    -print 2>/dev/null | sort -u
+)"
+
+secret_pattern='(FATHOM_API_KEY=[^[:space:]]{16,}|AQ\.[A-Za-z0-9._-]{20,}|eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z\-_]{20,}|gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,}|sk_(live|test|proj)_[A-Za-z0-9]{16,}|xox[baporsc]-[A-Za-z0-9-]{10,}|ya29\.[A-Za-z0-9\-_]+)'
+
+secret_hits="$(
+  rg -n \
+    --hidden \
+    --glob '!**/.git/**' \
+    --glob '!**/node_modules/**' \
+    --glob '!**/dist/**' \
+    --glob '!**/coverage/**' \
+    --glob '!**/.next/**' \
+    --glob '!**/.firecrawl/**' \
+    --glob '!**/.env' \
+    --glob '!**/.env.*' \
+    --glob '!**/*.min.*' \
+    --glob '!scripts/secret-sweep.sh' \
+    --glob '!scripts/public-surface-check.mjs' \
+    "$secret_pattern" \
+    "$root" 2>/dev/null || true
+)"
+
+exit_code=0
+
+if [ -n "$capture_hits" ]; then
+  exit_code=1
+  printf 'Suspicious capture files:\n%s\n\n' "$capture_hits"
+fi
+
+if [ -n "$secret_hits" ]; then
+  exit_code=1
+  printf 'Secret-like strings:\n%s\n\n' "$secret_hits"
+fi
+
+if [ "$exit_code" -eq 0 ]; then
+  printf 'No suspicious captures or secret-like strings found in %s\n' "$root"
+fi
+
+exit "$exit_code"
diff --git a/skills/fathom/agents/openai.yaml b/skills/fathom/agents/openai.yaml
index acedbdb..b68c199 100644
--- a/skills/fathom/agents/openai.yaml
+++ b/skills/fathom/agents/openai.yaml
@@ -1,8 +1,10 @@
 interface:
   display_name: "Fathom"
   short_description: "List, search, and export Fathom meetings via the official API."
+  icon_small: "./assets/fathom-small.svg"
+  icon_large: "./assets/fathom.svg"
+  brand_color: "#2563EB"
   default_prompt: "Use $fathom to inspect meetings, fetch transcripts and summaries, and export filtered results."
 
 policy:
   allow_implicit_invocation: true
-
diff --git a/skills/fathom/assets/fathom-small.svg b/skills/fathom/assets/fathom-small.svg
new file mode 100644
index 0000000..97847d8
--- /dev/null
+++ b/skills/fathom/assets/fathom-small.svg
@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="none" viewBox="0 0 20 20">
+  <path fill="currentColor" fill-rule="evenodd" d="M10 2.25a7.75 7.75 0 1 0 0 15.5 7.75 7.75 0 0 0 0-15.5ZM3.75 10A6.25 6.25 0 1 1 16.25 10 6.25 6.25 0 0 1 3.75 10Zm3.35 1.38a.75.75 0 0 1 1.02-.28c.28.16.93.44 1.88.44s1.6-.28 1.88-.44a.75.75 0 0 1 .74 1.3c-.52.29-1.4.64-2.62.64s-2.1-.35-2.62-.64a.75.75 0 0 1-.28-1.02ZM6.75 8.5a.75.75 0 0 1 .75-.75h.01a.75.75 0 0 1 0 1.5H7.5a.75.75 0 0 1-.75-.75Zm5 0a.75.75 0 0 1 .75-.75h.01a.75.75 0 0 1 0 1.5h-.01a.75.75 0 0 1-.75-.75Z" clip-rule="evenodd"/>
+</svg>
diff --git a/skills/fathom/assets/fathom.svg b/skills/fathom/assets/fathom.svg
new file mode 100644
index 0000000..8609f24
--- /dev/null
+++ b/skills/fathom/assets/fathom.svg
@@ -0,0 +1,9 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="96" height="96" fill="none" viewBox="0 0 96 96">
+  <rect width="96" height="96" fill="#14253A" rx="20"/>
+  <circle cx="48" cy="48" r="28" fill="#F3F8FF"/>
+  <circle cx="37" cy="43" r="4" fill="#14253A"/>
+  <circle cx="59" cy="43" r="4" fill="#14253A"/>
+  <path stroke="#14253A" stroke-linecap="round" stroke-width="6" d="M35 57c3.16 3.4 7.57 5.5 13 5.5S57.84 60.4 61 57"/>
+  <path fill="#78DCCA" d="M77 32.5c0 7.46-6.04 13.5-13.5 13.5S50 39.96 50 32.5 56.04 19 63.5 19 77 25.04 77 32.5Z"/>
+  <path fill="#14253A" d="M58.25 31.7a2 2 0 0 1 2.76-.62l2.14 1.34 3.18-4.23a2 2 0 1 1 3.2 2.4l-4.28 5.7a2 2 0 0 1-2.66.48l-3.72-2.32a2 2 0 0 1-.62-2.75Z"/>
+</svg>